CVE-2026-0671 | Wikimedia UploadWizard Extension 1.39/1.43/1.44/1.45 on MediaWiki cross site scripting

January 8, 2026 Yanac

A vulnerability identified as problematic has been detected in Wikimedia UploadWizard Extension 1.39/1.43/1.44/1.45 on MediaWiki. This vulnerability affects unknown code. Performing a manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-0671. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More